redirect (Re: On-going Internet Emergency and Domain Names )

Paul Vixie paul at
Sat Mar 31 21:11:40 UTC 2007

> > since malware isn't breaking dns, and since dns not a vector per se,
> > the idea of changing dns in any way to try to control malware
> > strikes me as a way to get dns to be broken in more places more
> > often.
> Well, once more people learn about DLV (especially the NS override
> extension that has been requested by zone operators), more and more
> questions will pop up why we can't do this for NS records they don't
> like for some reason.  The genie is out of the bottle, I'm afraid.

i'm going to fwd this to dns-operations at and answer it there,
since this is now far afield of "can i type that into an IOS prompt?".

More information about the NANOG mailing list